The unlock feature on System Preferences is a local machine feature (i.e. it does not query the web for authorisation). The risk by leaving System Preferences logged in is that someone could change your settings. This could only happen if someone was physically at your machine, entering your machine remotely etc... None of this could happen by leaving System Preferences unlocked.